EvernoteSubprocess.exe

  • File Path: C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
  • Description: Evernote Subprocess

Hashes

Type Hash
MD5 A6A76DAE91BDF1153E7FBB77A6E2F6AF
SHA1 CB1C8534C59A38F797D70DF639BCD2DB3DB8FD5F
SHA256 4A6A4CB1E2D8269ED71C0B6A8A13652D66F7D33D354C09C3A389124CF06ED9BD
SHA384 EAD83E3C8842AC4922C7634FBCABAAE25C0F2BCBB077289CF08A94550B687661B83E2D293EAAB18E82C03739C9053E55
SHA512 F00899134870A48E8462F5C99AECB56A92C18AB5D9F22C5CE9B80E16B1D30078026233FA5E8A06E538EDF37FFA253D79A3E62E989041122702027A431914CEA9
SSDEEP 12288:ZvrQvWc31pzPTk7DEb77DQQxz975lP4KmiNtQn:+vWc31pzPTk7DEb77DQmh450Qn
IMP 22A3139D2CDDF0CEC1EA850F1A9DA1B9
PESHA1 B72028FECFFEBB62C6F744EE939BFC02ECF9EEDB
PE256 B792539C665AC9847C84E1D47091BC92E0DA27A4749070AA9A478CB856D1AEC1

Runtime Data

Open Handles:

Path Type
(RW-) C:\Windows File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 File
(RW-) C:\xCyclopedia File
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 0F6C6C76C237FDBD4775DF1EEC48E4E7
  • Thumbprint: AC51E96E30DB8C8AB1657078805399F405626259
  • Issuer: CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
  • Subject: CN=Evernote Corporation, O=Evernote Corporation, L=Redwood City, S=CA, C=US

File Metadata

  • Original Filename: EvernoteSubprocess.exe
  • Product Name: Evernote
  • Company Name: Evernote Corp., 305 Walnut Street, Redwood City, CA 94063
  • File Version: 6,25,1,9091
  • Product Version: 6,25,1,9091
  • Language: English (United States)
  • Legal Copyright: Copyright 2020 Evernote Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/4a6a4cb1e2d8269ed71c0b6a8a13652d66f7d33d354c09c3a389124cf06ed9bd/detection/

MIT License. Copyright (c) 2020-2021 Strontic.